SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / libopenssl3 / etc (SUSE-SU-2024:3500-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3500-1 advisory. - CVE-2024-41996: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol,...

ROS-20250203-10

A vulnerability in the SSLselectnextproto function of the OpenSSL TLS and SSL protocols toolkit is related to the information disclosure. Exploitation of the vulnerability allows an attacker acting remotely to gain access to sensitive data and cause a denial of service...

RHSA-2024:6783 Red Hat Security Advisory: openssl security update

Bulletin has no description...

CVE-2024-9355

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

RHSA-2022:1091 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1082 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1076 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1066 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1071 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1077 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1073 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1065 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1112 Red Hat Security Advisory: openssl security update

Bulletin has no description...

RHSA-2022:1078 Red Hat Security Advisory: openssl security update

Bulletin has no description...

AIX is vulnerable to a denial of service (CVE-2024-6119) due to OpenSSL

IBM SECURITY ADVISORY First Issued: Mon Sep 30 15:11:36 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory43.asc Security Bulletin: AIX is vulnerable to a denial of service CVE-2024-6119 due to OpenSSL...

RLSA-2024:6783 Moderate: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: Possible denial of service in X.509 name checks CVE-2024-6119 For more details about the security...

openssl security update

An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

RLSA-2024:7262 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2024-41996: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE bsc1230698 Patch Instructions: To install...